# Authenticated Forms API CORS Error

**URL:** <https://community.hubspot.com/t/authenticated-forms-api-cors-error/69781>\
**Category:** APIs & Integrations\
**Tags:** forms\
**Created:** [November 22, 2022, 5:44pm UTC](https://community.hubspot.com/t/authenticated-forms-api-cors-error/69781 "2022-11-22T17:44:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ag24](https://avatars.discourse-cdn.com/v4/letter/a/5f8ce5/32.png) [@Ag24](https://community.hubspot.com/u/Ag24)\
**Post date:** [November 22, 2022, 5:44pm UTC](https://community.hubspot.com/t/authenticated-forms-api-cors-error/69781/1 "2022-11-22T17:44:45Z")

</div>

Hi, I am looking for clarifincation on the V3 Authenticated Forms API. The documentation states that, “Form submissions from external sources can be made to any registered HubSpot form. You can see a list of forms on your account by navigating to Marketing \> Lead Capture \> Forms.”  
But, there is also a note that states, "While endpoint has a higher rate limit than the unauthenticated v3 Form Submission endpoint, it does not support CORS. If you’re sending a CORS request, please use the unauthenticated [v3 Form Submission endpoint](https://legacydocs.hubspot.com/docs/methods/forms/submit_form?hsLang=en) instead. "  
I am making a post request from the form page on our website using the authenicated endpoint and I am obviously running into CORS errors when submitting. So, what are the external sources an Authenicated Form API request could be made without setting CORS and causing errors? How would I make a request from our domain to this API with having CORS issues?

---

<div class="post-metadata">

**Author:** ![MiaSrebrnjak](https://d10pqhm3lwygmk.cloudfront.net/user_avatar/community.hubspot.com/miasrebrnjak/32/10_2.png) [@MiaSrebrnjak](https://community.hubspot.com/u/MiaSrebrnjak)\
**Post date:** [November 25, 2022, 4:28pm UTC](https://community.hubspot.com/t/authenticated-forms-api-cors-error/69781/2 "2022-11-25T16:28:36Z")

</div>

Hi @Ag24,

Thank you for reaching out to the Community!

I’m not too familiar with APIs, but I’ve checked our documentation and our technical experts encourage customers to move to the new auth endpoints that allow a higher rate limit. These auth endpoints needs to be **called from a backend system** as they indeed do not allow CORS. You could, alternatively, also explore [HubSpot’s Serverless function.](https://developers.hubspot.com/docs/cms/data/serverless-functions)

Hi @coldrickjack, @miljkovicmisa, do you have any other advice for @Ag24? Thank you!

Cheers  
Mia, Community Team